ByteOS Network

Vulnerability Details :

CVE-2025-1864

Assigner Org ID-1a37b84a-8e51-4525-b3d6-87e2fae01dbd

Published At-03 Mar, 2025 | 08:15

Updated At-03 Mar, 2025 | 14:09

Buffer Overflow and Potential Code Execution in Radare2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:GovTech CSG

Assigner Org ID:1a37b84a-8e51-4525-b3d6-87e2fae01dbd

Published At:03 Mar, 2025 | 08:15

Updated At:03 Mar, 2025 | 14:09

▼CVE Numbering Authority (CNA)

Buffer Overflow and Potential Code Execution in Radare2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.

Affected Products

Vendor

Radare2 (r2)

Product

radare2

Collection URL

https://github.com

Default Status

unaffected

Versions

Affected

From 0 before <5.9.9 (git)
- -> unaffectedfrompatch 5.9.9

Problem Types

Type	CWE ID	Description
CWE	CWE-119	CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Type: CWE

CWE ID: CWE-119

Description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Metrics

Version	Base score	Base severity	Vector
4.0	10.0	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Version: 4.0

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Impacts

CAPEC ID	Description
CAPEC-100	CAPEC-100 Overflow Buffers

CAPEC ID: CAPEC-100

Description: CAPEC-100 Overflow Buffers

Credits

reporter

TITAN Team (titancaproject@gmail.com)

References

Hyperlink	Resource
https://github.com/radareorg/radare2/pull/23981	N/A

Hyperlink: https://github.com/radareorg/radare2/pull/23981

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve_disclosure@tech.gov.sg

Published At:03 Mar, 2025 | 09:15

Updated At:01 Jul, 2025 | 14:55

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	10.0	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 4.0

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Radare2 (r2)

>>radare2>>Versions up to 5.9.8(inclusive)

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Secondary	cve_disclosure@tech.gov.sg
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Secondary

Source: cve_disclosure@tech.gov.sg

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/radareorg/radare2/pull/23981	cve_disclosure@tech.gov.sg	Issue Tracking Vendor Advisory

Hyperlink: https://github.com/radareorg/radare2/pull/23981

Source: cve_disclosure@tech.gov.sg

Resource:

Issue Tracking

Vendor Advisory

CVE-2025-1864

Credits

Buffer Overflow and Potential Code Execution in Radare2

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs